请给一份F100-C-G的SSL VPN配置文档,谢谢。
(0)
sslvpn gateway SSLVPNGW
ip address 222.1.1.100 port 4433
service enable
quit
interface SSLVPN-AC 1
quit
sslvpn ip address-pool SSLPOOL 10.10.10.2 10.10.10.254
acl advanced 3999
rule permit ip destination 192.168.10.0 0.0.0.255
quit
sslvpn context SSLVPN
gateway SSLVPNGW
ip-tunnel interface SSLVPN-AC1
ip-tunnel address-pool SSLPOOL mask 255.255.255.0
ip-tunnel dns-server primary 223.5.5.5
ip-route-list NEIWANG
include 192.168.10.0 255.255.255.0
policy-group SSLVPNZIYUAN
filter ip-tunnel acl 3999
ip-tunnel access-route ip-route-list NEIWANG
quit
service enable
quit
local-user user1 class network
password simple user1
service-type sslvpn
authorization-attribute sslvpn-policy-group SSLVPNZIYUAN
quit
security-zone name SSLVPN
import interface SSLVPN-AC1
quit
object-group service 4433
service tcp destination eq 4433
quit
security-policy ip
rule 5 name Untrst-Local
action pass
source-zone Untrust
destination-zone Local
service 4433
quit
rule 10 name SSLVPN-Trust
action pass
source-zone SSLVPN
destination-zone Trust
quit
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论